Cybersecurity
🔒 Your BMS controllers are connected. Your maintenance technician accesses them remotely.
The question: could someone else access them too?
The IEC 62443 standard addresses this: network segmentation, device authentication, access logging, scheduled updates.
And the pressure is rising.
The Cyber Resilience Act (CRA) comes into force on 11 December 2027: all connected products will need to comply, with security updates guaranteed for a minimum of 5 years. The BMS equipment chosen today already needs to anticipate this.
The good news: IEC 62443 already covers most of the CRA’s requirements.
🔗 To learn more about the standard: Phoenix Contact
A closed proprietary system cannot be audited. Its updates depend on the manufacturer. Vendor lock-in is also a security risk.
That’s why at Workswell, we build these requirements in from the earliest SIA phases:
Several project owners already trust us for this. Your project deserves the same scrutiny.
→ info@workswell.ch | workswell.ch
Also worth reading
Workswell extends its offering with BAMO, its owner's project assistance service: end-to-end project steering, coordination of all stakeholders and SIA and KBOB compliance.
The five mistakes Workswell still sees regularly on BMS projects, and what we wish we could have said beforehand: late integration, closed systems, neglected training, skipped audits, sensors without intelligence.
Workswell has been appointed MCR/BMS engineer for the future innovation park of the Energypolis campus in Sion: control system design, supervision architecture and commissioning.
A first conversation is usually enough to define the potential and the scope of the mandate.
